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FN THE.CLATMS 



Amended claims follow: 






(Currently Am^^d) A method for processing neiSv^k accounring 
information, comprising: 

receiving accounting information over a packet-switched network; 



1. 



monitoring at least one aspect of the received accounting information; and 



accounting information that occurs during a surge in network traffic, based 
on the monitored aspect; 

wherein the portion of the accounting information is discarded to prevent an 
overload of subsequent processing . 

2. (Cancelled) 

3. (Original) The method as recited in claim 1 , wherein the accounting 
information is discarded for dealing with heavy network traffic. 

4. (Original) The method as recited in claim 3, and further comprising 
generating a summary of the accounting information. 

5. (Original) The method as recited in claim 1, wherein monitoring the at least 
one aspect of the received accounting information includes detecting a scan 
of a plurality of ports. 

6. (Cancelled) 

7. (Original) The method as recited in claim 1 , wherein monitoring the at least 
one aspect of the received accounting information includes monitoring a rate 
of receipt of the accounting information. 



after receiving the accounring information, d iscarding at least a portion of the 
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(Original) The method as recited in claim 7, wherein monitoring the at \^^^'fr^,scl^(^,^,^%i^. :, , - ^'^^ * — 
one aspect of ±e received accounting infonmation includes detecting.\vhether^^.,j^r^^^ rate- 
the rate of receipt of the accounting information exceeds a predetermined ^^Mvt^c^'^^^^^ rji dint- i/iXoiTri 



9. (Original) The method as recited in claim 1, wherein monitoring the at least ...ir^^^in^ : ■ ^ 
one aspect of the received accounting information includes monitoring a load - ^ % . . 
on a system receiving the accounting information. 

10. (Original) The method as recited in claim 1 , wherein the network includes 
the Internet, 

1 1 . (Currently Amended) A computer program product for processing network 
accounting information, comprising: 

(a) computer code for receiving accounting information over a packet-switched 

network; 

(b) computer code for monitoring at least one aspect of the received accounting 

information; and 

^ computer code for discarding at least a portion of the accounting information 

that occurs during a surge in neUvork traffic and is expendable , based on the 
monitored aspec ts after receiving the accounting information: 

computer code for allowing at least a portion of remaining accounting 
information to pass to subsequent accounting processing, after receiving the 
accounting information: 

wherein the portion of the accounting information is discar ded to prevent an 
overload of the subsequent accounting processing . 

12. (Cancelled) 

1 3 . (Original) The computer program product as recited in claim 1 1 , wherein the 
accounting information is discarded for dealing with heavy netv^'ork traffic. 
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14. 




' 15. 



(Orieinal) Th'e.computer program product as recited in claim 13, and ftirther^ .,,^;^^^^^^^ 
coinprisiT^iJSitipii^ter^code for generating a surhinary of the accounting v^ j^^v^^^'cone^^ 
information, j 

(Cancelled]?' 





1 6. (Original) The computer program product as recited in claim 1 1 , wherein the 
computer code for monitoring the at least one aspect of the received 
accounting information includes computer code for monitoring a rate of 
receipt of the accounting information. 

17. (Original) The computer program product as recited in claim 1 6, wherein the 
computer code for monitoring the at least one aspect of the received 
accounting information includes computer code for detecting whether the 
rate of receipt of the accounting information exceeds a predetermined 
amount. 

18. (Original) The computer program product as recited in claim 1 1 , wherein the 
computer code for monitoring the at least one aspect of the received 
accounting information includes computer code for detecting a scan of a 
plurality of ports. 

19. (Original) The computer program product as recited in claim 1 1, wherein the 
computer code for monitoring the at least one aspect of the received 
accounting information includes computer code for monitoring a load on a 
system receiving the accounting information. 



20. 



(Currently Amended) A system for processing network accounting 
information, comprising: 

-logic for receiving accounting information over a packet-switched network; 
-logic for monitoring at least one aspect of the received accounting 
information; and 
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' ^.-^(c)-^ • logic for discardiii^at least^^ajpo^^ioTi ^of the accounting i3iibFipa5tiQrv;t^^ 
i':-V x-,;4-'t)ccurs^uring a surge irr ngi^slfyirtra^ffi and is expend ab(e ^%a5^ed^0n4he,r; no ■ i^^^^^^^^^^^ 
1; ^ monitored aspec t, after receiving the accounting information; TD;iir j^ar^ .rr^^-ii^^^j^^^^^vi^ r^: acco jA^ 

, logic for aggreg ating at least a p.ention of the accounting information prior to ^, mii>^t^l5:^t toiy oivttxlul 

' passing to subsequent accounting processinii. based on the moni tored-as^ct. after ^A^rjmg^^j^^^^ 

receiving the accounting information: ^ . 

logic for allowing at least a portion of remaining accounting information to . . .-^^.v,^-.: 

pass to the subsequent accounting processing, after receiving the accounting . •'^..iac^tu^.r-.r^i^^sa^ir.^^-^^i: 
information: 

wherein the portions of the accounting information are discarded and 
aggregated to prevent an overload of the subsequent accounting processing: 

wherein the subsequent accounting processing includes operation and 
business support system processing , 

21. (Cancelled) 

22. (Cancelled) 

23. (Currently Amended) A method for processing network accounting 
information, comprising: 

(a) receiving accounting information over a packet-switched network; 

(b) detecting a scan of a plural i ty of ports; 

(c) detecting a scan of a plurality of Internet Protocol (IP) addresses; 

(d) detecting a rate of receipt of the accounting information; 

(e) detecting whether the rate of receipt of the accounting information exceeds a 
predetermined amount; 

(f) detecting a load on a system receiving the accounting information; 

(g) conditionally preventing an overload of the accounting information based on 
aspects detected during steps fbVff) bv discarding at least a portion of the 
accounting information after the receipt thereof to prevent an overload of 
subsequent accounting processing : and 

(h) generating a summary of the accounting information; 
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wherein the accounting^informalion that occurs durjrig:3;surge in network 
traffic is ci;iscaVded. ■ : * ^ ' ■ .^X^M^^' \ 



f 
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